CVE-2013-1349

Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter...

CVE-2013-1349: Improper Control of Generation of Code

Eval injection vulnerability in ajax.php in openSIS 4.5 through 5.2 allows remote attackers to execute arbitrary PHP code via the modname parameter...

Directory traversal

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

CVE-2009-0592

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

CVE-2009-0592: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PNphpBB2 1.2i and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in the ModName parameter to 1 adminwords.php, 2 admingroupsreapir.php, 3 adminsmilies.php, 4 adminranks.php, 5 adminstyles.php, and 6...

PNphpBB2 1.2i Local File Inclusion

+=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | PNphpBB2 = 1.2i ModName Multiple LFI Vulnerabilities | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos - stakerathotmaildotit | register glob 1 | |...

PNphpBB2 <= 1.2i (ModName) Multiple LFI Vulnerabilities

No description provided by source. +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | PNphpBB2 = 1.2i ModName Multiple LFI Vulnerabilities | Note | +=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=+=--=--=--=--=--=-+ | discovered by athos -...

PNPHPBB2 1.2i - ModName Multiple Local File Inclusions

PNPHPBB2 1.2i - ModName Multiple Local File Inclusions !/usr/bin/perl PNphpBB2 'E4E4E4'; $obj-title$poc; $obj-minsize500,200; $obj-maxsize500,200; text'Host/Path ex: http://localhost/cms'; input1; text'Local File ex: ../../../../../etc/passwd'; input2; button; Button; print $host; sub text my $lo...

PNphpBB2 <= 1.2i (ModName) Multiple Local File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================ PNphpBB2 'E4E4E4'; $obj-title$poc; $obj-minsize500,200; $obj-maxsize500,200; text'Host/Path ex: http://localhost/cms'; input1; text'Local File ex: ../../../../../etc/passwd';...

PNPHPBB2 < 1.2i - 'ModName' Multiple Local File Inclusions

!/usr/bin/perl PNphpBB2 'E4E4E4'; $obj-title$poc; $obj-minsize500,200; $obj-maxsize500,200; text'Host/Path ex: http://localhost/cms'; input1; text'Local File ex: ../../../../../etc/passwd'; input2; button; Button; print $host; sub text my $load = undef; my $text = shift; $load = $obj-Label -text ...

saPHP Lesson 2.0 - 'forumid' SQL Injection

!/usr/bin/perl For password http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModPassword%20from%20modretor For username http://www.example.com/path/showcat.php?forumid=-1%20union%20select%20ModName%20from%20modretor sent in by SnIpErSA selfar2002athotmail.com ported by str0ke...